DCSIMG
configure RPC over HTTP - Exchange 2003 - David Dan

David Dan

Microsoft Products and Technologies

configure RPC over HTTP - Exchange 2003

RPC over HTTPS: Server Configuration

Required Components Setup

Install the "RPC over HTTP Proxy" on the server that is hosting the public facing web site. If this is a front-end/back-end then it is the front-end server. If if it a single server, then it will be the Exchange server.
You will find RPC Proxy in Add/remove Programs --> Add/Remove Windows Components --> Networking Services

Configure SSL and Certificate

if you have a web certificate you can contniue if not create a web certificate http://blogs.microsoft.co.il/blogs/dand/archive/2009/07/19/enabling-owa-2003-ssl-using-your-own-certificate-authority.aspx 

On some installation you should also look at IIS Manager settings for the rpc virtual directory. The process is similar to that of setting up the exchange virtual directory for Outlook Web Access.


 

Exchange Server Registry Changes

Single Server Configuration
Exchange Server is also the domain controller

The domain controller needs to be a Global Catalog Server, but only requires one entry.

That key is:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters

Type REG_MULTI_SZ
Name: NSPI Interface protocol sequences
Value: ncacn_http:6004

or you can download this file rpc-http-dc.txt and change it to rpc-http-dc.reg

Than add this key:

Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\RpcProxy
Key:ValidPorts

Key:
server = domain controller/exchange server
domain.local = internal domain name
mail.external.com - external domain name - then change "domain.local" to match your domain.

or you can download this file rpc-proxy.txt edit the file to match you exchange server and change it to rpc-porxy.reg

You need reboot the server

Front-End / Back-end Server Configuration
Where there are two Exchange servers and a separate domain controller.Key:
server-fe = Front-end Exchange Server
server-be = Back-end Exchange Server
server-dc = Domain Controller with Global Catalog
domain.local = Internal domain name
mail.external.com = External certificate/domain name

or you can download this file rpc-http-porxy-fornt.txt. edit the file to match you exchange server and change it to rpc-porxy-front.reg 

Testing the port configuration

do a telnet chack to port 6001, 6002, 6004

telnet localhost 6001

telnet localhost 6002

telnet localhost 6004

if the telnet is not connecting to one of this port check the reg key again,

the most populer problem is with the port 6004 so run this rpc-http-dc.txt (change the name to rpc-http-dc.reg) and reboot the server

Test the System from Outside using Microsoft's Test Site

Microsoft have created a test site for Exchange features. use a test account with it.

https://testexchangeconnectivity.com

Create a Microsoft Office Outlook 2003 Profile for your users to use with RPC over HTTPS

Next, we must configure the Microsoft Outlook 2003 Profile to use RPC over HTTPS.

Navigate to the Control Panel in your Windows XP Professional Workstation and click the Mail icon. Add a new Mail profile or modify an existing Profile. Navigate to the Connection Tab and check the Checkbox Connect to my Exchange mailbox using HTTP and then click the Exchange Proxy Settings Button.


Figure 7: Enable RPC Proxy Settings

Enter your Server Information, similar to Figure 8.


Figure 8: Exchange Proxy Settings

Test the Connection

After enabling the RPC Proxy settings, your Outlook connection to the Exchange Server should be established successfully. The question is now: How to determine that it is an RPC over HTTPS connection?

The answer is simple. Right click the Outlook icon in the taskbar while you are holding the CTRL Key. The Context menu opens and now you have the option to see the Exchange Server Connection Status.


Figure 9: Test the RPC over HTTPS connection

Congratulations! You have successfully enabled your Exchange Server 2003 / Microsoft Outlook 2003 environment to use the RPC over HTTPS feature. 

Attachment: rpc-proxy.txt
פורסם: Jul 22 2009, 09:16 PM by dand | with 9 comment(s)
תגים:

תוכן התגובה

dand כתב/ה:

the registry that add automatically is on port 5000

and it need to be change to 6001-6004

as u can see in the article

# July 31, 2009 1:18 AM

Marlon Lynn כתב/ה:

This was really helpful thank you

Marlon

# October 4, 2009 3:27 AM

Craig Wedge כתב/ה:

You are the Man!! MS support couldn't figure this out...

Thanks for taking the time for posting this!! You saved ME!!

# October 17, 2009 2:34 AM

Allyn כתב/ה:

I can't get the test to run because of a self-signed certificate.

# October 21, 2009 5:40 AM

dand כתב/ה:

hey allyn

you need to create new certificate

you can see how to creat in my blog

blogs.microsoft.co.il/.../enabling-owa-2003-ssl-using-your-own-certificate-authority.aspx

# November 10, 2009 2:08 PM

Sara כתב/ה:

This article rocks!!

# November 11, 2009 1:46 PM

Bob כתב/ה:

What about instructions for an exchange server that is not a domain controller, that also doesn't have a front end - back end exchange scenario?  I have one exchange server and other member servers and one domain controller, which is the global catalog.  The domain controller is not my exchange server, what now?

# January 7, 2010 7:01 PM

David כתב/ה:

I'm in the same boat as Bob, single Exchange server that is not a domain controller. Would love to know what I need to do.

# January 22, 2010 12:59 AM
שלח תגובה

(שדה חובה)  

(שדה חובה)  

(אופציונלי)

(שדה חובה) 

Please add 4 and 8 and type the answer here:


Enter the numbers above: